Head of Cyber Security – PayLink Salla Cyber Security 10:21

AimGulf; Jeddah; On-site; SAR 500,000 - 900,000; Full time

Job summary

Salla is seeking an experienced Head of Cyber Security to lead governance, risk management, and operations across its payment platforms and tech stack. You will drive CSF alignment, incident response, and security architecture across cloud and on-premise environments.

Role requires 5+ years in regulated financial cybersecurity, strong leadership, and hands-on experience with SIEM/EDR, firewalls, and vulnerability management. Full-time on-site in Saudi Arabia with competitive compensation.

Qualifications

• Minimum 5 years of cybersecurity or information security experience in financial/regulated environments (SAMA).
• Experience implementing and maintaining SAMA CSF controls.
• GRC, audits, risk assessments, and remediation planning experience.

Responsibilities

• Develop and maintain cybersecurity policies, standards, and controls aligned with SAMA CSF and regulatory requirements.
• Oversee risk assessments, internal audits, remediation activities, and governance documentation.
• Lead SOC operations, incident response, threat monitoring, and remediation actions.
• Coordinate with IT/engineering to remediate critical vulnerabilities within timelines.
• Develop and deliver cybersecurity awareness and training; report KPIs to senior management.

Skills

Network Security

Application Security

Vulnerability Management

Security Architecture

SOC Management

GRC

Communication Skills

Education

Bachelor's degree in Cybersecurity / related field

Certifications: CISSP, CISM, CRISC, CEH (preferred)

Tools

SIEM

EDR/XDR

Firewalls

IDS/IPS

Vulnerability Scanning Tools

Job description

Job Title:

Head of Cyber Security – PayLink

We are seeking an experienced Cyber Security Manager to lead cybersecurity operations, governance, risk management, and regulatory compliance across PayLink’s payment platforms and technology infrastructure.

Key Responsibilities:

• Develop, implement, and maintain cybersecurity policies, procedures, standards, and controls aligned with the SAMA Cyber Security Framework (CSF) and applicable regulatory requirements.
• Lead cybersecurity risk assessments, compliance reviews, internal audits, and remediation activities.
• Maintain cybersecurity governance documentation, risk registers, and compliance reporting.
• Identify regulatory compliance gaps and develop corrective action plans.
• Oversee daily security operations, threat monitoring, detection, and incident response activities.
• Manage security monitoring solutions, including SIEM, EDR/XDR, firewalls, and intrusion detection/prevention systems (IDS/IPS).
• Lead cybersecurity incident investigations, root cause analysis, and corrective actions.
• Develop, maintain, and test incident response procedures and escalation processes.
• Oversee network security controls, firewall configurations, access management, and infrastructure protection.
• Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC).
• Ensure appropriate security controls are implemented across web applications, APIs, mobile applications, and payment platforms.
• Support secure architecture reviews, application security assessments, and penetration testing activities.
• Lead vulnerability assessments, security testing, and remediation tracking.
• Evaluate cybersecurity risks across applications, networks, cloud environments, and third-party integrations.
• Coordinate with IT and engineering teams to remediate critical vulnerabilities within defined timelines.
• Monitor emerging cyber threats and recommend preventive security measures.
• Lead cybersecurity initiatives, manage security projects, and mentor cybersecurity team members.
• Coordinate with IT, Engineering, Risk, Compliance, and business stakeholders.
• Develop and deliver cybersecurity awareness and training programs.
• Prepare cybersecurity KPIs, risk reports, and security posture updates for senior management.

Experience Required:

• Minimum 5 years of relevant cybersecurity or information security experience within SAMA-licensed financial institutions, banks, payment service providers, or FinTech companies in Saudi Arabia.
• Proven hands-on experience implementing and maintaining controls aligned with the SAMA Cyber Security Framework (SAMA CSF).
• Demonstrated experience in Cybersecurity Governance, Risk Management, and Compliance (GRC), including risk assessments, regulatory audits, and remediation plans.
• Proven experience managing Security Operations (SOC), security monitoring, and cybersecurity incident response.
• Experience conducting or overseeing vulnerability assessments, penetration testing, and security remediation activities.
• Demonstrated experience leading cybersecurity projects, coordinating technical teams, or managing cybersecurity professionals.

Education Qualifications:

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. Professional cybersecurity certifications such as CISSP, CISM, CRISC, CEH, or equivalent are preferred.

Skills Required:

• Strong technical knowledge of Network Security, Application Security, Vulnerability Management, and Security Architecture.
• Hands‑on experience with cybersecurity technologies such as SIEM, EDR/XDR, firewalls, IDS/IPS, and vulnerability scanning tools.
• Strong communication, analytical, stakeholder management, and problem‑solving skills.

Employment / Job Type:

Full Time

About the Company:

Salla is a Saudi ecommerce platform that lets merchants create and run online stores without technical expertise. It bundles storefront design, product and inventory management, payments, shipping integrations and marketing tools into one subscription. Popular with small businesses and independent brands, Salla also supports an app store and developer ecosystem.

Company Industry:

FinTech

Department / Functional Area:

Cyber Security

Closing Date:

Not mentioned (apply as soon as possible)